TI-2022-13098 CVE-2022-31053 · GHSA-75rw-34q6-72cr
Signature forgery in Biscuit
Priority HIGH 82
Biscuit is an authentication and authorization token for microservices architectures.
biscuit-auth
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
biscuit-auth records in CISA KEVNo biscuit-auth vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2024-27971 CVE-2024-41949 · GHSA-p9w4-585h-g3c7
biscuit-rust vulnerable to public key confusion in third party block
Priority LOW 28
biscuit-rust is the Rust implementation of Biscuit, an authentication and authorization token for microservices architectures.
TI-2024-27970 CVE-2024-41948 · GHSA-5hcj-rwm6-xmw4
biscuit-java vulnerable to public key confusion in third party block
Priority LOW 23
biscuit-java is the java implementation of Biscuit, an authentication and authorization token for microservices architectures.
Priority LOW 15
Biscuit is an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logic language.